File php-CVE-2016-5766.patch of Package php5.openSUSE_Leap_42.1_Update

Index: php-5.6.1/ext/gd/libgd/gd_gd2.c
===================================================================
--- php-5.6.1.orig/ext/gd/libgd/gd_gd2.c	2016-06-27 17:21:37.181443015 +0200
+++ php-5.6.1/ext/gd/libgd/gd_gd2.c	2016-06-27 17:21:37.333445571 +0200
@@ -138,11 +138,18 @@ static int _gd2GetHeader(gdIOCtxPtr in,
 	if (gd2_compressed(*fmt)) {
 		nc = (*ncx) * (*ncy);
 		GD2_DBG(php_gd_error("Reading %d chunk index entries", nc));
+               if (overflow2(sidx, nc)) {
+                       goto fail1;
+               }
 		sidx = sizeof(t_chunk_info) * nc;
 		if (sidx <= 0) {
 			goto fail1;
 		}
 		cidx = gdCalloc(sidx, 1);
+               if (cidx == NULL) {
+                       goto fail1;
+               }
+
 		for (i = 0; i < nc; i++) {
 			if (gdGetInt(&cidx[i].offset, in) != 1) {
 				goto fail1;